808bits

Apple corecrypto Module v11.1 [Intel, User, Software]

FIPS 140-3 certificate #4389 · Apple Inc. · data as of 2026-09-03

Apple corecrypto Module v11.1 [Intel, User, Software], from Apple Inc., holds FIPS 140-3 certificate #4389 at overall level 1. The validation is active, with a sunset date of 2027-12-06. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Active. Sunset date 2027-12-06, 458 days away.
Caveat: When operated in approved mode

Certificate

Certificate number4389
StandardFIPS 140-3
Statusactive
Sunset date2027-12-06
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorApple Inc. · website
Software versions11.1

Module description

Quoted from the NIST CMVP entry for this certificate.

The Apple corecrypto User Space Module for Intel is a software cryptographic module running on a multi-chip standalone hardware device and provides services intended to protect data in transit and at rest.

Security level exceptions

  • Physical security: N/A
  • Non-invasive security: N/A
  • Mitigation of other attacks: N/A

Approved algorithms (37)

AlgorithmCAVP certificates
AES-CBCA919, A920, A921, A925, A926, A927
AES-CCMA918, A919, A921, A925, A929
AES-CFB128A919, A921, A925
AES-CFB8A919, A921, A925
AES-CMACA919
AES-CTRA918, A919, A921, A925, A929
AES-ECBA918, A919, A921, A925, A926, A927, A929
AES-GCMA918, A919, A921, A925, A929
AES-KWA919, A921, A925
AES-OFBA919, A921, A925
AES-XTSA919, A921, A925, A926, A927
Counter DRBGA918, A919, A921, A925, A929
ECDSA KeyGen (FIPS186-4)A919, A923, A924, A930
ECDSA KeyVer (FIPS186-4)A919, A923, A924, A930
ECDSA SigGen (FIPS186-4)A919, A923, A924, A930
ECDSA SigVer (FIPS186-4)A919, A923, A924, A930
HMAC DRBGA919, A923, A924, A930
HMAC-SHA-1A919, A923, A924, A928, A930
HMAC-SHA2-224A919, A923, A924, A928, A930
HMAC-SHA2-256A919, A923, A924, A928, A930
HMAC-SHA2-384A919, A923, A924, A928, A930
HMAC-SHA2-512A919, A923, A924, A928, A930
HMAC-SHA2-512/256A919, A923, A924, A930
KAS-ECC-SSC Sp800-56Ar3A919
KAS-FFC-SSC Sp800-56Ar3A919
KDF SP800-108A919, A923, A924, A930
PBKDFA919, A923, A924, A930
RSA KeyGen (FIPS186-4)A919, A923, A924, A930
RSA SigGen (FIPS186-4)A919, A923, A924, A930
RSA SigVer (FIPS186-4)A919, A923, A924, A930
Safe Primes Key GenerationA919
SHA-1A919, A923, A924, A928, A930
SHA2-224A919, A923, A924, A928, A930
SHA2-256A919, A923, A924, A928, A930
SHA2-384A919, A923, A924, A928, A930
SHA2-512A919, A923, A924, A928, A930
SHA2-512/256A919, A923, A924, A930

Tested configurations

  • macOS Big Sur 11.0.1 running on iMac Pro with a Xeon W-2140B (Sky Lake) with PAA
  • macOS Big Sur 11.0.1 running on iMac Pro with a Xeon W-2140B (Sky Lake) without PAA
  • macOS Big Sur 11.0.1 running on Mac Pro with a Xeon W-3223 (Cascade Lake) with PAA
  • macOS Big Sur 11.0.1 running on Mac Pro with a Xeon W-3223 (Cascade Lake) without PAA
  • macOS Big Sur 11.0.1 running on MacBook Air with an Intel i5-8210Y (Amber Lake) with PAA
  • macOS Big Sur 11.0.1 running on MacBook Air with an Intel i5-8210Y (Amber Lake) without PAA
  • macOS Big Sur 11.0.1 running on MacBook Air with an Intel i7-1060NG7 (Ice Lake) with PAA
  • macOS Big Sur 11.0.1 running on MacBook Air with an Intel i7-1060NG7 (Ice Lake) without PAA
  • macOS Big Sur 11.0.1 running on MacBook Pro with an Intel i7-8850H (Coffee Lake) with PAA
  • macOS Big Sur 11.0.1 running on MacBook Pro with an Intel i7-8850H (Coffee Lake) without PAA
  • macOS Big Sur 11.0.1 running on MacBook Pro with an Intel i9-9880H (Coffee Lake) with PAA
  • macOS Big Sur 11.0.1 running on MacBook Pro with an Intel i9-9880H (Coffee Lake) without PAA

Validation history

DateTypeLab
2022-12-07Initialatsec information security corporation

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status active
  • Validation dates on record: 2022-12-07

Source documents